$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft File: E3993DB092F827CDCF711046B493411A00A72701.mft (raw, json) Hash identifier: 0gc/KPO8AVFHZwWFyc60Mdi+JSKa2awUn2Ww18FEL54= Subject key identifier: FA:1E:F1:2F:03:81:7E:B1:A9:EF:33:24:89:78:56:9B:8B:FD:55:CC Authority key identifier: E3:99:3D:B0:92:F8:27:CD:CF:71:10:46:B4:93:41:1A:00:A7:27:01 Certificate issuer: /CN=E3993DB092F827CDCF711046B493411A00A72701 Certificate serial: 460CA111D65437A4B8BF858A16D98D796D399075 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E3993DB092F827CDCF711046B493411A00A72701.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft Manifest number: 38 Signing time: Mon 02 Mar 2026 02:28:16 +0000 Manifest this update: Mon 02 Mar 2026 02:23:16 +0000 Manifest next update: Tue 03 Mar 2026 05:18:16 +0000 Files and hashes: 1: E3993DB092F827CDCF711046B493411A00A72701.crl (hash: oXRPa90LRTzps3gKW5ht6JfGMQZlCMuWhcCPpJMbDr8=) 2: 3133382e3235322e37322e302f32332d3233203d3e20313337373331.roa (hash: Bj7faP7dbLHP8DKHtGy7odbPHjPoUjxSJmi90LoGi/o=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E3993DB092F827CDCF711046B493411A00A72701.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 05:18:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:0c:a1:11:d6:54:37:a4:b8:bf:85:8a:16:d9:8d:79:6d:39:90:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3993DB092F827CDCF711046B493411A00A72701 Validity Not Before: Mar 2 02:23:16 2026 GMT Not After : Mar 3 05:18:16 2026 GMT Subject: CN=FA1EF12F03817EB1A9EF33248978569B8BFD55CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:43:f3:21:89:f2:6a:7e:3a:4f:0b:ba:01:d2: 22:0f:72:d3:55:ae:24:28:f2:82:13:ca:b9:2d:26: 81:fe:39:3a:c2:31:9c:f4:e2:91:ae:d8:5b:e1:ce: 4e:95:5c:b4:a1:86:98:3c:cf:7a:51:25:76:15:f6: 85:26:af:fd:24:aa:15:c4:56:ab:80:21:f9:6a:7c: bd:af:1b:79:c2:31:54:c8:8c:58:04:9b:2b:92:3c: d0:44:d5:97:f1:cd:33:c8:8f:f3:4f:bf:6a:f7:ff: 49:d7:bf:f2:13:75:f2:ae:13:3f:2f:73:27:91:c6: 27:bd:d6:bc:b6:ad:79:a4:57:58:b2:91:56:44:73: 47:45:cd:e8:fd:1e:79:41:e0:40:61:15:2d:1b:74: ed:16:de:b0:68:e2:b9:20:10:76:36:43:22:a5:56: e1:07:02:5c:a7:63:22:e4:45:6a:f9:d4:0b:0f:ab: fc:21:13:3e:0a:c0:7b:44:ee:04:fc:1f:10:28:38: a2:13:b9:29:c7:49:1c:47:05:cc:0d:58:a5:32:4c: 4c:be:b0:c5:c6:9f:bd:1c:ec:16:65:d0:f7:2b:54: 5b:77:94:1d:36:16:5b:be:0e:27:0b:73:ef:29:d9: 1d:f5:f4:c2:9b:89:ad:70:f1:32:9a:e0:7d:8c:37: 39:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:1E:F1:2F:03:81:7E:B1:A9:EF:33:24:89:78:56:9B:8B:FD:55:CC X509v3 Authority Key Identifier: keyid:E3:99:3D:B0:92:F8:27:CD:CF:71:10:46:B4:93:41:1A:00:A7:27:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E3993DB092F827CDCF711046B493411A00A72701.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:21:1c:eb:ec:d0:ee:85:31:66:91:e7:f5:a3:65:21:a7:70: fd:a8:bd:79:b9:07:36:74:b6:1a:0f:02:02:c3:fc:15:eb:09: 58:13:04:6c:6e:ee:49:78:7d:d2:7c:39:02:35:17:b5:14:3c: 0e:f1:9e:ad:e8:2a:ce:2c:5e:65:86:65:f4:3b:36:df:69:15: df:d9:1c:16:53:a0:5e:a7:66:de:62:f8:3d:aa:fd:38:ab:6b: 36:95:ef:d2:65:47:46:b0:30:e1:0e:33:14:bf:64:63:0a:3c: 86:be:2f:0c:cd:82:6b:eb:96:a7:0f:79:fa:9e:e5:7f:3a:37: ca:a2:fc:dc:9d:78:3d:3f:cc:40:89:4a:b1:c0:0d:b3:f0:98: 03:13:e5:51:92:c8:92:3c:51:81:e0:f5:42:28:61:f4:38:52: fc:a6:22:8e:c4:67:a0:31:72:1b:3e:66:0f:fb:24:4d:e3:4b: 15:b7:7b:2b:f1:c7:44:fe:8d:27:25:05:53:5b:9e:6c:bf:8a: ca:02:a1:3f:4c:3d:43:4b:a7:70:8e:96:60:4d:9a:ac:2a:0a: 9d:33:64:c1:5a:e3:44:c4:1e:79:69:49:98:76:f1:d4:64:90: 08:34:61:f6:29:cb:6b:ad:b3:17:8e:ba:1f:6c:7d:b2:79:dd: 72:d3:f1:fe -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURgyhEdZUN6S4v4WKFtmNeW05kHUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM5OTNEQjA5MkY4MjdDRENGNzExMDQ2QjQ5MzQxMUEw MEE3MjcwMTAeFw0yNjAzMDIwMjIzMTZaFw0yNjAzMDMwNTE4MTZaMDMxMTAvBgNV BAMTKEZBMUVGMTJGMDM4MTdFQjFBOUVGMzMyNDg5Nzg1NjlCOEJGRDU1Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Q/MhifJqfjpPC7oB0iIPctNV riQo8oITyrktJoH+OTrCMZz04pGu2Fvhzk6VXLShhpg8z3pRJXYV9oUmr/0kqhXE VquAIflqfL2vG3nCMVTIjFgEmyuSPNBE1ZfxzTPIj/NPv2r3/0nXv/ITdfKuEz8v cyeRxie91ry2rXmkV1iykVZEc0dFzej9HnlB4EBhFS0bdO0W3rBo4rkgEHY2QyKl VuEHAlynYyLkRWr51AsPq/whEz4KwHtE7gT8HxAoOKITuSnHSRxHBcwNWKUyTEy+ sMXGn70c7BZl0PcrVFt3lB02Flu+DicLc+8p2R319MKbia1w8TKa4H2MNzkXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU+h7xLwOBfrGp7zMkiXhWm4v9VcwwHwYDVR0j BBgwFoAU45k9sJL4J83PcRBGtJNBGgCnJwEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDgzOTQyNS8xL0UzOTkzREIwOTJGODI3Q0RDRjcxMTA0NkI0OTM0 MTFBMDBBNzI3MDEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRTM5OTNEQjA5MkY4MjdDRENGNzExMDQ2QjQ5MzQxMUEwMEE3MjcwMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ4Mzk0MjUvMS9FMzk5M0RCMDkyRjgy N0NEQ0Y3MTEwNDZCNDkzNDExQTAwQTcyNzAxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABCEc6+zQ7oUx ZpHn9aNlIadw/ai9ebkHNnS2Gg8CAsP8FesJWBMEbG7uSXh90nw5AjUXtRQ8DvGe regqzixeZYZl9Ds232kV39kcFlOgXqdm3mL4Par9OKtrNpXv0mVHRrAw4Q4zFL9k Ywo8hr4vDM2Ca+uWpw95+p7lfzo3yqL83J14PT/MQIlKscANs/CYAxPlUZLIkjxR geD1Qihh9DhS/KYijsRnoDFyGz5mD/skTeNLFbd7K/HHRP6NJyUFU1uebL+KygKh P0w9Q0uncI6WYE2arCoKnTNkwVrjRMQeeWlJmHbx1GSQCDRh9inLa62zF466H2x9 snndctPx/g== -----END CERTIFICATE-----Generated at Mon Mar 2 18:40:25 2026 by rpki-client